Security Analyst - Incident Monitoring and SIEM

Assistant Manager - Cyber Transformation

Overview: 

KPMG in India, a professional services firm, is the Indian member firm affiliated with KPMG International and was established in September 1993. Our professionals leverage the global network of firms, providing detailed knowledge of local laws, regulations, markets, and competition. KPMG has offices across India in Ahmedabad, Bengaluru, Chandigarh, Chennai, Gurugram, Hyderabad, Jaipur, Kochi, Kolkata, Mumbai, Noida, Pune, and Vadodara. KPMG in India offers services to national and international clients in India across sectors. We strive to provide rapid, performance-based, industry-focussed, and technology-enabled services, which reflect a shared knowledge of global and local industries and our experience of the Indian business environment. KPMG Advisory professionals provide advice and assistance to enable companies, intermediaries, and public sector bodies to mitigate risk, improve performance, and create value. KPMG firms provide a wide range of Risk Advisory and Financial Advisory Services that can help clients respond to immediate needs as well as put in place the strategies for the longer term.

Job Title: 

Acon/Con/AM 

Skills: Security Analyst – Incident Monitoring & SIEM

 Location: Mumbai/Gurgaon/Noida/Kolkata/Bangalore 

Location: Gurgaon Shift: 24x7 rotational shifts (as per SOC operations) 

Experience: 2– 5 years 

Employment Type: Full-time Position 

Overview: 

We are seeking a Security Analyst – Incident Monitoring & SIEMto join our Security Operations Center (SOC). The candidate will be responsible for continuous monitoring, detection, analysis, and initial response to security incidents using SIEM and security monitoring tools. The role requires hands-on experience with SIEM platforms and a strong understanding of endpoint, network, and cloud security solutions. 

Key Responsibilities: 

• Perform real-time security monitoring and analysis of alerts generated by SIEM tools such as Splunk, ArcSight, QRadar, RSA SA, Microsoft Sentinel, and CrowdStrike.

 • Investigate, analyze, and triage security events and incidents to determine severity, scope, and impact. 

• Perform initial incident response activities including containment, escalation, and documentation. 

• Monitor and analyze alerts from EDR, Antivirus, Firewall, IPS, Deception, and other security tools. 

• Identify false positives and fine-tune SIEM rules and alert thresholds where required. 

• Follow defined incident response playbooks and SOPs; recommend improvements based on observations. • Escalate confirmed incidents to L2/L3 teams with clear analysis, evidence, and recommendations. 

• Maintain accurate incident records in ticketing systems and prepare shift handover notes.

 • Support compliance and audit requirements by maintaining logs, reports, and evidence. 

• Collaborate with internal teams and stakeholders during security incidents.

 • Participate in threat-hunting activities and proactive monitoring when required.

Qualification:

 

Bachelor’s degree in Computer Science, Information Security, or a related field (preferred).

 • 2–4 years of experience in SOC / Cyber Security Operations / Incident Monitoring. 

• Experience working in 24x7 SOC environments is mandatory.

 

 

Equal employment opportunity information 

KPMG India has a policy of providing equal opportunity for all applicants and employees regardless of their colour, caste, religion, age, sex/gender, national origin, citizenship, sexual orientation, gender identity or expression, disability, or other legally protected status. KPMG India values diversity and we request you to submit the details

Experience Level

Mid Level